Static task
static1
Behavioral task
behavioral1
Sample
a9af71ede58c72effe0aeef094783ef89774849f5077bdbd6d4b940ea02249c6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9af71ede58c72effe0aeef094783ef89774849f5077bdbd6d4b940ea02249c6.exe
Resource
win10v2004-20220901-en
General
-
Target
a9af71ede58c72effe0aeef094783ef89774849f5077bdbd6d4b940ea02249c6
-
Size
592KB
-
MD5
7f2d8ec8edcadbfce8c9d84479d68781
-
SHA1
92b974b07742d8979dca1cae2fc6f17a1b36f572
-
SHA256
a9af71ede58c72effe0aeef094783ef89774849f5077bdbd6d4b940ea02249c6
-
SHA512
1fd25ac8428ee56d932ae949dc465c9be87bcbcfb1ac15c091a35cb65e95902ea7a1d804a38eb25be29bb902d15561058e99a5cbba5a3a804b8e2727e995353d
-
SSDEEP
6144:/Key87hDZVcLtIYtJMI3V7MgfInN+FQT9eSq+rpx8:/CmhVVcLtIYt33V7FQnces6D
Malware Config
Signatures
Files
-
a9af71ede58c72effe0aeef094783ef89774849f5077bdbd6d4b940ea02249c6.exe windows x86
2c7c26a15c3e856e2c55a7b4ef5e7614
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
RtlMoveMemory
GlobalFree
GetModuleHandleA
GlobalAlloc
GetTickCount
user32
DrawIconEx
FrameRect
GetWindowRect
ScreenToClient
FillRect
SetWindowRgn
SetWindowTextA
OffsetRect
DrawTextA
ReleaseDC
WindowFromPoint
PostMessageA
InflateRect
SetCapture
DrawFocusRect
GetDC
SetTimer
SetRect
KillTimer
GetClientRect
GetCursorPos
GetParent
gdi32
SelectObject
CreatePen
MoveToEx
DeleteDC
SelectClipRgn
GetStockObject
SetPixelV
CreateSolidBrush
CreateCompatibleDC
Ellipse
Polygon
GetPixel
LineTo
CreateEllipticRgn
GetTextColor
ExcludeClipRect
GetDIBits
SetTextColor
CreateRectRgn
CombineRgn
GetBkColor
SetDIBitsToDevice
RoundRect
DeleteObject
CreateCompatibleBitmap
SetBkColor
BitBlt
SetBkMode
oleaut32
OleTranslateColor
msvbvm60
EVENT_SINK_GetIDsOfNames
ord693
ord588
MethCallEngine
EVENT_SINK_Invoke
ord518
ord519
Zombie_GetTypeInfo
ord591
EVENT_SINK2_Release
ord595
ord598
ord305
ord709
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ord714
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord573
EVENT_SINK2_AddRef
ord681
ord576
ord685
ord100
ord616
ord617
ord618
Sections
.text Size: 476KB - Virtual size: 473KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE